The agents can use /login/normal to bypass the SSO and log in.